Roaming wireless transmit/receive unit authorization for edge applications

Abstract

Systems, methods, and instrumentalities may be described herein for wireless transmit/receive units (WTRUs) to authorize roaming (e.g., authorize an EEC (Edge Enabler Client) in a roaming WTRLI by a V-ECS (Visiting Edge Configuration Server) token that may be generated by the H-ECS (Home Edge Configuration Server). A first message may be sent. The first message may indicate a request for an authorization token to be used in a visiting network. A second message may be sent. The second message may indicate authentication information. A third message may be sent. The third message may indicate an authorization token. The authorization token may be associated with the authentication information. A fourth message may be received. The fourth message may indicate a validation of the authorization token and may indicate an identity of a visiting network.

1 - 16 . (canceled) 
     
     
         17 . A first network node, the first network node comprising:
 a processor configured to:
 receive, from a wireless transmit/receive unit (WTRU), a first message comprising temporary public land mobile network (T-PLMN) information, a first authorization token, a first Edge Enabler Client (EEC) identifier (ID), and a request to validate the first authorization token; 
 determine home public land mobile network (HPLMN) information for the WTRU based on the T-PLMN information; 
 determine a second EEC ID based on the first EEC ID; 
 determine a second network node based on the HPLMN information and the second EEC ID; 
 send, to the second network node, a second message comprising the request to validate the first authorization token; 
 receive, from the second network node, a third message comprising a validation response; 
 generate a second authorization token if the validation response indicates that the first authorization token is valid, wherein the second authorization token is associated with a Visited Network Edge Execution Service (V-EES); and 
 send, to the WTRU, a fourth message comprising the second authorization token and information about the V-EES. 
   
     
     
         18 . The first network node of  claim 17 , wherein the first network node further comprises a visiting edge computing service (V-ECS), and wherein the second network node further comprises a Home Network Edge Computing Service (H-ECS). 
     
     
         19 . The first network node of  claim 17 , wherein the processor is further configured to validate the second authorization token by determining a digital signature of the first authorization token. 
     
     
         20 . The first network node of  claim 17 , wherein the first EEC ID is different from the second EEC ID. 
     
     
         21 . The first network node of  claim 17 , wherein the first EEC ID obfuscates an identity of the WTRU, and wherein the second EEC ID is associated with the identity of the WTRU. 
     
     
         22 . The first network node of  claim 17 , wherein the processor being configured to determine the second EEC ID based on the first EEC ID comprises the processor being configured to determine the second EEC ID by sending a request to the second network node to decrypt the second EEC ID. 
     
     
         23 . The first network node of  claim 17 , wherein the processor being configured to determine the second EEC ID based on the first EEC ID comprises the processor configured to determine the second EEC ID by performing at least one of a decryption or a reverse hash. 
     
     
         24 . The first network node of  claim 17 , wherein the first message further comprises a Generic Public Subscription Identifier (GPSI), and wherein the processor is further configured to:
 determine a home network of the WTRU based on the GPSI, and wherein the home network is associated with the second network node.   
     
     
         25 . A method performed by a first network node, wherein the method comprises:
 receiving, from a wireless transmit receive unit (WTRU), a first message comprising temporary public land mobile network (T-PLMN) information, a first authorization token, a first Edge Enabler Client (EEC) identifier (ID), and a request to validate the first authorization token;   determining home public land mobile network (HPLMN) information for the WTRU based on the T-PLMN information;   determining a second EEC ID based on the first EEC ID;   determining a second network node based on the HPLMN information and the second EEC ID;   sending, to the second network node, a second message comprising the request to validate the first authorization token;   receiving, from the second network node, a third message comprising a validation response;   generating a second authorization token if the validation response indicates that the first authorization token is valid, wherein the second authorization token is associated with a Visited Network Edge Execution Service (V-EES); and   sending, to the WTRU, a fourth message comprising the second authorization token and information about the V-EES.   
     
     
         26 . The method of  claim 25 , wherein the first network node further comprises a visiting edge computing service (V-ECS), and wherein the second network node further comprises a Home Network Edge Computing Service (H-ECS). 
     
     
         27 . The method of  claim 25 , wherein the method further comprises validating the second authorization token by determining a digital signature of the first authorization token. 
     
     
         28 . The method of  claim 25 , wherein the first EEC ID is different from the second EEC ID. 
     
     
         29 . The method of  claim 25 , wherein the first EEC ID obfuscates an identity of the WTRU, and wherein the second EEC ID is associated with the identity of the WTRU. 
     
     
         30 . The method of  claim 25 , wherein determining the second EEC ID based on the first EEC ID comprises determining the second EEC ID by sending a request to the second network node to decrypt the second EEC ID. 
     
     
         31 . The method of  claim 25 , wherein determining the second EEC ID based on the first EEC ID comprises determining the second EEC ID by performing at least one of a decryption or a reverse hash. 
     
     
         32 . The method of  claim 25 , wherein the first message further comprises a Generic Public Subscription Identifier (GPSI), and wherein the method further comprises:
 determining a home network of the WTRU based on the GPSI, and wherein the home network is associated with the second network node.